$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa File: da636e8c-4d89-3b3b-971d-d9b212de0db2.roa (raw, json) Hash identifier: ICENyCptJN7NbHZLzKQoWhXKZVicSCw5t1e64ZYW/Qs= Subject key identifier: C9:F9:B4:E9:03:E5:42:1F:28:18:3E:9B:DC:AD:82:C0:ED:F4:0B:B0 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849CE9A50637930533F00AEE640 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 173.199.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:50:63:79:30:53:3f:00:ae:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=4a3c0518-53dd-4191-820b-62cba58b06f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:9d:6d:1b:db:c6:de:ed:c4:8d:7e:cb:5f: f0:39:16:43:86:d4:7f:97:06:d0:ec:03:b7:70:63: 77:2e:38:cb:f4:c8:cb:3f:a8:5b:f4:80:b1:10:0a: 4a:7e:a3:88:62:a8:da:9d:15:22:e5:c6:04:1c:51: e7:8f:1f:cb:85:3b:e8:08:35:a5:00:ae:2d:1e:a6: ac:d9:d0:15:7e:3b:45:d3:e0:0e:e5:7c:15:35:af: 0a:b1:16:bd:87:bd:b8:0c:ab:7b:e2:5a:b1:33:50: e6:51:cc:23:fd:8e:0d:23:af:85:29:3b:d5:f1:e3: 3c:5e:57:9b:dd:ea:56:30:c6:ab:8d:95:1e:ba:9f: 2e:48:18:c8:6c:68:7b:59:93:90:26:1e:7d:de:32: 01:b2:56:63:ee:0f:e8:21:9a:8c:f9:44:57:79:81: 81:84:80:78:51:de:c2:7b:9a:1e:1c:c9:3a:de:f3: 6f:70:e2:18:16:6b:21:90:05:9f:d1:0f:de:a9:4b: 9b:76:5e:44:3b:38:01:36:dc:16:ec:98:ef:ea:8d: 66:07:22:8a:ec:cc:9a:a4:cb:d0:a0:6c:7e:bd:27: 72:09:87:6c:ab:12:4a:fa:a6:81:93:30:44:c6:d2: 54:71:8b:82:87:79:29:73:c3:5c:f7:af:79:57:d4: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F9:B4:E9:03:E5:42:1F:28:18:3E:9B:DC:AD:82:C0:ED:F4:0B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ae:3e:41:c1:5a:33:b0:b5:6c:03:34:40:62:a0:66:17:f6: 77:ce:2d:00:f8:48:98:94:1f:32:40:74:86:8f:03:f0:78:ac: 1d:dd:8b:83:fe:1b:6f:95:b0:12:f0:84:31:d0:d1:6d:b3:ca: 8f:07:ec:c3:aa:50:cc:23:49:95:c4:0d:b6:5b:a9:e0:2c:18: b2:a8:e3:fc:fd:b8:f8:42:a2:35:84:df:70:bb:d4:c2:9c:ac: ca:e6:89:b2:c9:0e:c3:cf:52:08:c9:27:ea:21:55:2c:8e:c7: 87:3b:d4:1f:4c:63:2d:64:26:76:51:04:0d:49:da:98:06:7f: ed:f7:62:4b:0e:c1:08:88:7b:39:48:79:63:70:c5:d7:76:b0: 1e:74:04:a0:4e:71:9a:17:32:c5:1b:dc:23:c6:86:31:e5:80: 64:b4:b7:58:80:58:13:85:fb:1d:62:a1:29:26:62:b8:cc:d0: 44:40:1a:b4:6f:bc:47:0a:0e:ab:ab:89:09:11:b9:6e:25:ee: e4:fb:f8:bd:7f:b9:9f:47:02:f9:ea:23:13:af:7f:55:52:4d: 3f:65:29:5d:c3:04:40:80:18:15:56:52:67:8c:cd:d5:3a:c4: 13:65:a2:1b:78:e0:cd:ce:a7:3c:fb:d8:0e:5d:aa:21:83:6f: e3:a7:1d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlBjeTBTPwCu5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NGEzYzA1MTgtNTNkZC00MTkxLTgyMGItNjJjYmE1OGIwNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTadbRvbxt7txI1+y1/wORZDhtR/lwbQ7AO3 cGN3LjjL9MjLP6hb9ICxEApKfqOIYqjanRUi5cYEHFHnjx/LhTvoCDWlAK4tHqas 2dAVfjtF0+AO5XwVNa8KsRa9h724DKt74lqxM1DmUcwj/Y4NI6+FKTvV8eM8Xleb 3epWMMarjZUeup8uSBjIbGh7WZOQJh593jIBslZj7g/oIZqM+URXeYGBhIB4Ud7C e5oeHMk63vNvcOIYFmshkAWf0Q/eqUubdl5EOzgBNtwW7Jjv6o1mByKK7MyapMvQ oGx+vSdyCYdsqxJK+qaBkzBExtJUcYuCh3kpc8Nc9695V9R+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn5tOkD5UIfKBg+m9ytgsDt9AuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGE2MzZlOGMtNGQ4OS0z YjNiLTk3MWQtZDliMjEyZGUwZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcclMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+uPkHBWjOwtWwDNEBioGYX9nfOLQD4SJiUHzJAdIaPA/B4rB3di4P+ G2+VsBLwhDHQ0W2zyo8H7MOqUMwjSZXEDbZbqeAsGLKo4/z9uPhCojWE33C71MKc rMrmibLJDsPPUgjJJ+ohVSyOx4c71B9MYy1kJnZRBA1J2pgGf+33YksOwQiIezlI eWNwxdd2sB50BKBOcZoXMsUb3CPGhjHlgGS0t1iAWBOF+x1ioSkmYrjM0ERAGrRv vEcKDquriQkRuW4l7uT7+L1/uZ9HAvnqIxOvf1VSTT9lKV3DBECAGBVWUmeMzdU6 xBNloht44M3Opzz72A5dqiGDb+OnHSI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:36:31 2025 by rpki-client